writeups.xyz / Stored Cross-Site Scripting (XSS) in Zimbra version 8.8.15_GA_4059 CVE-2022-41348

Submitter : c2a

Date: 7 April 2023

Bounty : undisclosed

Vulnerabilities :

• Stored XSS

Programs :

• Zimbra

Authors :

• Guillaume Jacques
• Melvil Guillaume
• Kévin Tellier

Link :
https://www.synacktiv.com/sites/default/files/2023-04/Synacktiv-ZimbraConnect-CVE-2022-41348.pdf